# Can't Create Rules for Auditbeat

**URL:** <https://discuss.elastic.co/t/cant-create-rules-for-auditbeat/329923>\
**Category:** Elastic Observability\
**Tags:** detection-rules\
**Created:** [April 13, 2023, 10:42am UTC](https://discuss.elastic.co/t/cant-create-rules-for-auditbeat/329923 "2023-04-13T10:42:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hajar\_Lachhab](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hajar_lachhab/32/119311_2.png) [@Hajar\_Lachhab](https://discuss.elastic.co/u/Hajar_Lachhab)\
**Post date:** [April 13, 2023, 10:42am UTC](https://discuss.elastic.co/t/cant-create-rules-for-auditbeat/329923/1 "2023-04-13T10:42:50Z")

</div>

Hello everyone,  
I want to create a rule about for my data view (auditbeat), but when I try to create I can't find the columns that I have on the data view s you seen bellow and when i hold the LOG VIEW Default I can't see auditbeat-\* .

 ![Screenshot from 2023-04-13 10-41-06](https://us1.discourse-cdn.com/elastic/original/3X/0/9/09a4741fe2eeb2eec687fb8163a95e92303b1f56.png)